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Top Stories 

• The Youngstown, Ohio wastewater treatment plant was evacuated May 4 when liquid 
chlorine began leaking from a pipe as workers were trying to switch one-ton tanks of the 
chemical, causing a loss of about 500 pounds of the substance. - WKBN 27 Youngstown 
(See item 13) 

• A water line rupture forced 13 schools in Donna, Texas, to close May 4 after water was 
shut off to schools in the district while crews worked to repair the break. - McAllen 
Monitor (See item 16) 

• Operations at the Beltsville, Maryland fire station were moved to a neighboring station 
indefinitely after the station was closed when 300 gallons of kitchen waste was discovered 
May 1 due to a broken sewage pipe. - WUSA 9 Washington, D.C. (See item 20) 

• A May 4 fire at a strip shopping center in Hollywood, Florida, destroyed three businesses 
and damaged two others, while smoke filled about six additional businesses that were 
safely evacuated. - South Florida Sun-Sentinel (See item 26) 
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Energy Sector 



Nothing to report 
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Chemical Industry Sector 

See items 10 and 13 
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Nuclear Reactors, Materials, and Waste Sector 

1. May 4, Associated Press - (New Mexico) Nuclear weapons lab worker seriously 
burned in accident. Nine Los Alamos National Laboratory employees were 
hospitalized May 3 after an accident occurred while they were performing preventative 
maintenance in an electrical substation that provides power to the New Mexico lab’s 
Neutron Science Center. Authorities are investigating the incident and officials reported 
that portions of the lab remained without power. 

Source: http://abcnews.go.com/US/wireStorv/nuclear-weapons-lab-worker-burned- 
accident-30798188 

[ Return to top ] 

Critical Manufacturing Sector 

2. May 4, U.S. Department of Labor - (Mississippi) Mississippi’s Suburban Plastics 
fails to correct workplace hazards following OSHA inspection. The Occupational 
Safety and Health Administration issued four safety and health citations to Suburban 
Plastics Co., May 4 for violations at its Grenada, Mississippi plant which included 
failing to have electrical conductors in conduit or another enclosure, failing to protect 
live electrical parts from accidental contact, and for not developing procedures to avoid 
accidental machine start-up during maintenance or service. Proposed fines total 
$50,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=27903 

3. May 4, U.S. Department of Labor - (New York) Lack of protective equipment for 
Republic Steel plant electrical results and 1st and 3rd degree burns after arc flash. 

The Occupational Safety and Health Administration cited Republic Steel Corp., in 
Blasdell May 4 with one serious and two repeat violations May 4 for failing to protect 
employees against contact with energized equipment, following an investigation into an 
October 2014 incident that injured a worker. Proposed penalties total $147,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
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SES&p id=27897 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

4. May 4, KMGH 7 Denver - (Colorado) Longhorn Bandit strikes again: Suspect robs 
credit union in Broomfield; 9th target, FBI says. Denver authorities are searching 
for a suspect dubbed the “Longhorn Bandit” who is allegedly responsible for six bank 
robberies, one casing, and two attempted robberies in the area since February. The 
suspect’s most recent robbery included a Public Service Credit Union branch in 
Broomfield May 4. 

Source: http://www.thedenverchannel.com/news/local-news/longhorn-bandit-strikes- 
again-suspect-robs-credit-union-in-broomfield-9th-target-fbi-savs05042015 

For another story, see item 24 
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Transportation Systems Sector 

5. May 5, WVIT 30 New Britain - (Connecticut) Bridgeport man killed in Fairfield 1-95 
crash. Northbound lanes of Interstate 95 near Fairfield were closed for several hours 
May 5 after 1 person was killed and 2 others were injured in an accident involving a car 
that sides wiped another vehicle before it ran off the road and crashed into several trees. 
Source: http://www.nbcconnecticut.com/news/local/Fairfield-Crash-Closes-I-95-North- 
302530791.html 

6. May 5, Longview Daily News - (Oregon) One dead, several injured in crash that 
closes Highway 30 near Rainier. U.S. Highway 30 south of Rainier in Columbia 
County was closed for more than 7 hours May 4 while officials responded to a 3- 
vehicle, head-on collision that killed 1 person and injured 3 others. The accident is 
under investigation. 

Source: http://tdn.com/news/local/fatal-crash-closes-highway-in- 
rainier/article 5068 1 cc6- 1 dS3-5fc 1 -84b3-5ff961d9f2eb.html 

7. May 4, KERO 23 Bakersfield - (California) EPA cites Bakersfield oil train terminal 
for Clean Air Act violations. The U.S. Environmental Protection Agency issued 10 
violations to the Bakersfield Crude Terminal in California after the agency found that 
the terminal’s permit was invalid and that the facility lacked required pollution controls 
and emissions offsets. 
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Source: http://www.turnto23.com/news/local-news/epa-cites-bakersfield-oil-train- 
terminal-for-clean-air-act-violations 



8. May 4, Riverside Press-Enterprise - (California) Barstow: Suicidal woman causes I- 
15 crash with big-rig, deputies say. One lane of southbound Interstate 15 near Fort 
Irwin Road in Yermo was reopened 3 hours after all lanes were closed while officials 
investigated a deliberate crash involving a wrong-way driver that slammed into a semi- 
truck causing it to hit another vehicle before overturning and spilling fuel onto the 
roadway May 3. All southbound lanes reopened nearly 10 hours after the crash that left 
several people injured. 

Source: http://www.pe.com/articles/woman-766443-southbound-crash.html 

9. May 4, KXAS 5 Fort Worth - (Texas) Semi carrying cattle tips, shuts down 
Interstate 35W: Burleson police. Southbound lanes of Interstate 34W in Burleson 
were closed for 3 hours May 4 while crews cleared the scene after a semi-truck 
carrying dozens of cattle overturned. 

Source: http://www.nbcdfw.com/news/local/Semi-Carrying-Cattle-Tips-Shuts-Down-I- 
35W-Burleson-Police-30239095 1 .html 



For additional stories, see items 13 and 29 
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Food and Agriculture Sector 

10. May 5, Associated Press - (Oklahoma) Chemical firm fined $225,000 for Oklahoma 
pesticide disposal. Helena Chemical Co., pleaded guilty May 4 to charges related to 
the unlawful disposal of unused pesticide at its facility in Welch, Oklahoma, where the 
company allegedly discharged the pesticide onto the ground and allowed it to run onto 
an adjacent property and into the Little Cabin Creek. The company was ordered to pay 
$225,000 in penalties. 

Source: http://www.knoxnews.com/news/state/chemical-firm-fined-225000-for- 
oklahoma-pesticide-disposal 52813167 

11. May 4, U.S. Food and Drug Administration - (California) Poco Dolce Confections 
announces recall of Individually Wrapped Tile varieties: Almond, Aztec Chile, 
Burnt Caramel, Almond Coconut, Ginger, and Sesame Toffee. The U.S. Food and 
Drug Administration reported May 1 that Poco Dolce Confections of San Francisco 
issued a recall for six varieties of its Individually Wrapped Tiles chocolate products due 
to undeclared milk and mislabeling. 

Source: http ://w w w.fda. gov/S afety/Recalls/ucm445 558 .htm 
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Water and Wastewater Systems Sector 

12. May 5, WECT 6 Wilmington - (North Carolina) Water main break affects all of 



- 4 - 



Silver Lake, Silva Terra area. Crews spent several hours repairing a water main break 
May 5 in New Hanover County that affected about 800 residents in the Silver Lake and 
Silva Terra areas. Officials stated that a precautionary boil water advisory will go into 
effect once repairs are completed. 

Source: http://www.wect.com/storv/28977820/water-main-break-affects-all-of-silver- 
lake-silva-terra-area 



13. May 4, WKBN 27 Youngstown - (Ohio) Chlorine leak stopped at Youngstown 

wastewater plant. The Youngstown wastewater treatment plant in Ohio was evacuated 
May 4 when liquid chlorine began leaking from a pipe as workers were trying to switch 
one-ton tanks of the chemical, causing a loss of about 500 pounds of the substance. 
Residents near the facility were ordered to shelter-in-place while crews remained in the 
building until the liquid chlorine warmed up and dissipated after it froze into large 
puddles on the floor instead of evaporating into the air. 

Source: http://wkbn.com/2015/05/04/chlorine-leak-causes-evacuation-at-youngstown- 
water-plant/ 

For another story, see item 16 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

14. May 5, Middletown Times Herald-Record - (New York) Firefighters battling blaze in 
Shawangunk Ridge State Forest. Crews reached 75 percent containment May 5 of a 
wildfire that burned through 1,800 acres in Sullivan and Ulster counties. Authorities 
believe that the fire was started by a homeowner that violated a Statewide bum ban and 
burned debris outdoors. 

Source: http://www.recordonline.com/article/20150505/NEWS/150509715/101019 

15. May 5, WRC 4 Washington, D.C. - (Maryland) Connelly School of the Holy Child 
closed Tuesday after fire. A May 4 fire that started in a conference room at the 
Connelly School of the Holy Child in Montgomery County forced the school’s closure 
May 5 with the exception of AP Calculus students who were scheduled to take exams. 
Source: http://www.nbcwashington.com/news/local/Connelly-School-of-the-Holv- 
Child-Closed-Tuesday-After-Fire-302531291.html 

16. May 4, McAllen Monitor - (Texas) Boil water notice in effect for Donna after water 

line break. A water line rupture forced 13 schools in Donna, Texas, to close May 4 
after water was shut off to the schools in the district while crews worked to repair the 
break. The city was issued a boil water advisory until further notice due to low water 
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pressure. 

Source: http://www.themonitor.com/news/local/water-line-break-forces-several-donna- 
schools-to-close-for/article 551 85 8ec-f26f- 1 le4-8e 18-7381 ac34f7 6d.html 



17. May 4, KOB 4 Albuquerque - (Arizona) 7 Farmington Schools elementary students 
injured in bus crash. Twenty students were transported to area hospitals after a 
Farmington Municipal Schools bus overturned near Red Valley, Arizona, May 4. The 
driver reported that the brakes went out as the bus was traveling down a mountain. 
Source: http ://w w w . kob . com/article/stories/s 37 86127. shtml 

18. May 4, WXIA 11 Atlanta - (Georgia) All-clear given at Clayton State University 
after bomb threat. Classes were canceled at Clayton State University in Georgia May 
4 after students and faculty members were evacuated from campus buildings due to a 
bomb threat. Police issued an all-clear after searching the campus for more than 6 
hours. 

Source: http://www. llalive.com/story/news/local/riverdale- 
ionesboro/2015/05/04/clayton-state -bomb-threat/268769 11/ 
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Emergency Services Sector 

19. May 5, Daily News ofNewburyport - (Massachusetts) Regional dispatch center 
evacuated after fumes sicken 911 staffers. An unknown odor from an HVAC unit 
prompted officials to evacuate dispatchers from the Essex County Regional Emergency 
Communications Center in Middleton May 3 and implement a contingency plan to 
handle 9-1-1 calls while crews worked to scrub the center and clean the air ducts of the 
system. Officials worked to restore operations by May 5. 

Source: http://www.newburvportnews.com/news/local news/regional-dispatch-center- 
evacuated-after-fumes-sicken-staffers/ailicle 867988c5-7cba-5edO-b6e2- 
ff465f92eb4e.html 



20. May 4, WUSA 9 Washington, D.C. - (Maryland) 300 gallons of sewage closes 
Beltsville fire station. Personnel and operations at the Beltsville fire station in 
Maryland were moved to the Calvert Station indefinitely after the station was closed 
when 300 gallons of kitchen waste was discovered underneath the kitchen floor May 1 
due to a broken sewage pipe. Officials reported that repairs were underway. 

Source: http://www.wusa9.com/storv/news/local/maryland/2015/05/04/sewage-leak- 
beltsville-fire-house/26867425/ 



21. May 4, Vacaville Reporter - (California) Riot at Vacaville prison injures three 
inmates, one officer. Authorities are investigating the cause of a riot involving 58 
inmates at California State Prison, Solano May 4 that left 3 inmates and 1 correctional 
officer injured before guards were able to stop the fights. 

Source: http://www.thereporter.com/general-news/20150504/riot-at-vacaville-prison- 
injures-three-inmates-one-officer 
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Information Technology Sector 

22. May 5, Help Net Security - (International) New AlphaCrypt ransom ware delivered 
via Angler EK. Security researchers at Webroot and Rackspace discovered and 
determined that a new form of ransomware resembling TeslaCrypt and CryptoWall, 
dubbed AlphaCrypt, is being delivered via the Angler exploit kit (EK). Researchers 
stated that it differs from other ransomware variants by deleting volume snapshot 
services (VSS) and executing quietly in background processes to avoid detection. 
Source: http://www.net-securitv.org/malware news.php?id=3033 

23. May 5, Help Net Security - (International) New infostealer tries to foil analysis 
attempts by wiping hard drive. Security researchers from Cisco discovered a new 
information-stealing trojan dubbed Romberik, which is being delivered via spoofed 
emails purporting to be from the “Windows Corporation,” and hooks into users’ 
browsers to read credentials and other sensitive information for exfiltration to an 
attacker-controlled server. If the trojan detects an analysis attempt, it attempts to 
destroy the affected computer’s hard disk by overwriting the system’s master boot 
record (MBR). 

Source: http://www.net-securitv.org/malware news.php?id=3032 

24. May 5, IDG News Service - (International) Cybercriminals borrow from APT 
playbook in attack against PoS vendors. Security researchers at RSA and FireEye 
reported cybercriminals began mimicking cyberespionage advanced persistent threat 
(APT) groups by deploying spear-phishing campaigns designed to infect point-of-sale 
PoS payment systems. The attacks delivered the Vawtrak banking trojan and a new 
document-based exploit kit (EK) called Microsoft Word Intruder (MWI). 

Source: http://www.networkworld.com/article/2918733/cvbercriminals-borrow-from- 
apt-plavbook-in-attack-against-pos-vendors.html#tk.rss all 

25. May 5, Help Net Security - (International) Crimeware infects one-third of 
computers worldwide. The Anti-Phishing Working Group (APWG) reported that 
23.5 million malware variants were detected in the fourth quarter of 2014, setting a 
new record that was up 59 percent from the second quarter of 2014. According to 
researchers, the retail/service industry was the most targeted sector, specifically 
through payment services. 

Source: http://www.net-securitv.org/secworld.php?id= 18346 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



Nothing to report 
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Commercial Facilities Sector 

26. May 5, South Florida Sun-Sentinel - (Florida) Fire rips through Hollywood shopping 
center, destroys three businesses. A May 4 fire at a strip shopping center in 
Hollywood, Florida, destroyed three businesses and damaged two others, while smoke 
filled about six additional businesses that were safely evacuated. Firefighters remained 
at the scene May 5 to extinguish hot spots, while officials launched an investigation 
into the cause of the blaze. 

Source: http://www.sun-sentinel.com/local/broward/hollvwood/fl-hollywood-plaza- 
fire-20150504-story.html 

27. May 4, KLAS 8 Las Vegas - (Nevada) Data breach at Las Vegas Hard Rock. Hard 
Rock Hotel and Casino notified some customers of the company’s Hard Rock Las 
Vegas property that their personal information, including names and financial data, 
may have been compromised during a data breach that targeted payment card 
transactions from September 2014 - April 2. The attack was limited to customers who 
used a payment card at the Las Vegas property’s restaurant, bar, and retail locations, 
and did not affect transactions at the hotel, casino, and several other locations on the 
property. 

Source: http://www.8newsnow.com/story/28973421/credit-and-debit-card-breach-at- 
las-vegas-hard-rock 

28. May 4, Dallas Business Journal - (National) Sally Beauty investigating a possible 
second data breach. Sally Beauty Holdings Inc., announced that it began an 
investigation May 4 into a possible breach of payment card data at some of the 
company’s U.S. stores during the week of April 27. Sally is one of several merchants 
required to upgrade its checkout terminals by October following a March 2014 breach. 
Source: http://www.biziournals.com/dallas/news/2015/05/04/sallv-beautv- 
investigating-a-possible-second-data.html 

29. May 4, South Florida Sun-Sentinel - (Florida) Huge fire torches apartments, 
displacing at least two dozen. At least 24 residents were displaced by a May 4 fire that 
destroyed or damaged up to 16 units at the Greentree Apartments in Oakland Park, 
Florida, and caused a stretch of North Dixie Highway to shut down for several hours. 
The blaze remains under investigation. 

Source: http://www.sun-sentinel.com/local/broward/oakland-park/fl-oakland-park- fire- 
20 150504-story.html 

For additional stories, see items 24 and 25 
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Dams Sector 



Nothing to report 
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